Error: rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.mft
File:                     7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.mft (raw, json)
Hash identifier:          4xex2QFGvt6rCKc7KUYrtxtZNZGKEm8K+rtNmcLTTGU=
Subject key identifier:   7A:C5:07:D0:D6:08:7E:6C:34:58:89:F6:BD:EC:9F:DC:37:AC:AD:52
Authority key identifier: 76:52:D9:D4:F9:A6:42:C7:B0:47:74:C9:0C:F6:F3:FB:21:B7:F4:2B
Certificate issuer:       /CN=7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B
Certificate serial:       1E0DF1580C56BBB188CFD71401DD2349CA32ECC5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.mft
Manifest number:          04C8
Signing time:             Mon 19 Oct 2026 22:51:34 +0000
Manifest this update:     Mon 19 Oct 2026 22:46:34 +0000
Manifest next update:     Wed 21 Oct 2026 00:19:34 +0000
Files and hashes:         1: 323830343a326635303a3a2f33322d3334203d3e20323634383833.roa (hash: z4/BdNYNko5mnyyuXaWWxZuFRYLrcXeY5FpOZmSV9G4=)
                          2: 3136382e3232372e34302e302f32322d3234203d3e20323634383833.roa (hash: DLGbpR5dFrKFyzVeNNFio6hSiOD3ZmtgLNk4C+7OCEU=)
                          3: 7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.crl (hash: 7bqbTmfvodUe7+YavLcBUJxqiahfz7Rwdx3EQKv0NjQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.crl
                          rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 Oct 2026 00:19:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:0d:f1:58:0c:56:bb:b1:88:cf:d7:14:01:dd:23:49:ca:32:ec:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B
        Validity
            Not Before: Oct 19 22:46:34 2026 GMT
            Not After : Oct 21 00:19:34 2026 GMT
        Subject: CN=7AC507D0D6087E6C345889F6BDEC9FDC37ACAD52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b4:31:1c:1f:7f:70:0e:87:50:49:00:dc:7e:
                    4d:6d:58:87:6f:ec:ff:06:b3:54:75:fb:3e:2a:21:
                    72:4c:7c:5d:7f:2f:ef:97:c6:30:5a:cb:e7:07:0d:
                    65:59:31:e9:8e:70:14:cd:ec:e6:d7:8c:e9:81:06:
                    2f:ff:62:41:62:00:0f:83:c3:1c:74:0b:a8:ed:68:
                    14:e7:78:85:c9:db:ae:5f:a9:46:b9:26:26:41:7e:
                    16:ce:a9:62:17:92:d9:6d:f3:4b:43:a5:c0:4e:5a:
                    20:d6:22:82:ef:e1:1f:c7:0d:50:ab:6f:ea:6c:0f:
                    d8:3f:bf:55:17:64:3b:b4:6b:c0:c2:92:6d:12:be:
                    f8:75:9c:b6:58:27:11:17:6a:3b:9d:e0:5e:42:0d:
                    c7:0e:7d:68:af:4e:32:ec:13:07:3c:1f:c6:72:ec:
                    99:27:13:ad:b6:67:96:03:53:81:e8:f1:0a:38:51:
                    09:47:d6:69:c7:dc:8d:e6:ac:4f:93:37:8b:0d:43:
                    44:df:fb:71:27:f0:d6:c7:e3:95:0b:7b:cf:89:93:
                    3a:40:c1:db:f4:59:4d:6e:49:89:40:71:33:a6:97:
                    8c:9e:e8:b4:3d:b4:d1:f6:52:3b:2d:02:60:55:21:
                    50:40:8c:c0:1e:8d:71:54:2d:b6:87:c3:13:d4:97:
                    d7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C5:07:D0:D6:08:7E:6C:34:58:89:F6:BD:EC:9F:DC:37:AC:AD:52
            X509v3 Authority Key Identifier:
                keyid:76:52:D9:D4:F9:A6:42:C7:B0:47:74:C9:0C:F6:F3:FB:21:B7:F4:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ce:ba:01:66:68:66:4c:a4:2c:2e:88:ec:d2:ef:c6:1d:da:
         9d:ca:6b:06:4d:08:9a:3a:12:06:75:e0:c0:46:6f:af:3d:c7:
         a1:74:db:8f:67:b1:96:40:05:41:df:c9:89:71:9d:64:f5:99:
         e6:2d:61:b1:90:b0:8f:d8:e1:9f:bc:9b:f6:5e:d7:ab:13:ec:
         43:94:6d:3c:c8:fa:fb:cf:b9:b4:4f:c7:c7:bf:de:00:73:e0:
         29:27:e1:f8:51:8c:17:f0:46:a4:58:12:ba:ec:86:62:4f:ec:
         ed:0d:b5:22:46:4a:d8:c4:81:bd:45:b2:ac:34:81:7f:1f:96:
         3e:d9:d2:81:43:c6:16:6c:c4:b9:a7:c9:b5:0a:79:74:0c:ff:
         91:64:b6:e5:e4:3f:26:97:4b:cb:41:ba:14:67:66:d0:34:74:
         45:36:1f:eb:ef:39:d9:55:de:c0:d6:14:af:6f:2c:56:6e:45:
         ba:03:0d:08:9d:b4:77:44:5f:23:f6:4e:60:3f:5d:1c:92:0c:
         7c:58:83:82:80:12:9a:dd:96:8e:fc:1e:86:63:c9:78:cd:e0:
         7c:b8:af:11:9f:82:0f:af:64:35:13:71:de:61:71:0b:30:55:
         3e:55:25:15:b2:37:78:5a:19:21:08:2e:0b:c9:58:d0:49:c2:
         eb:f3:61:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:44:49 2026 by rpki-client